$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa File: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (raw, json) Hash identifier: NBLRT5Wz8XeA6Cyv8p7omLfu8hLr71dpXJIucAHIgDg= Subject key identifier: EB:72:4C:E9:3D:6D:E6:53:99:99:DC:F3:E6:9F:BB:0C:4D:ED:4C:6F Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F43285849244E7AF11445A888B9BA2D64 Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 9009 IP address blocks: 72.18.92.0/24 maxlen: 24 72.18.93.0/24 maxlen: 24 72.18.94.0/24 maxlen: 24 72.18.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7a:f1:14:45:a8:88:b9:ba:2d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=72defa33-dfb8-47f2-82b0-0649fdaa40e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:da:bc:8f:56:ee:f3:d0:6d:a5:e3:1a:9d: ce:2c:ca:08:f2:ac:a7:12:00:1f:9c:5e:bd:54:13: 7e:94:c8:c4:54:85:e1:d8:78:ab:23:1e:2c:13:90: 96:16:82:3c:e3:a1:95:4d:dd:c3:05:1a:6d:7d:49: ea:7d:22:b4:77:76:93:8d:7b:e4:82:25:85:27:d9: 8b:9a:7f:93:58:f5:a9:12:97:0d:1b:d6:57:ee:68: 95:c8:f9:46:a4:01:3e:0a:b6:08:7e:98:c8:ba:3f: df:b2:91:f9:6f:48:3f:b2:99:b4:42:1b:8b:f3:55: bc:d3:1d:7e:24:31:01:dd:89:68:ac:bc:d4:d6:35: 88:86:ee:8b:11:4f:82:c0:24:08:c2:c6:02:2b:fc: b8:21:9b:ec:76:95:ab:24:1f:92:19:ee:a4:66:08: 94:c6:fe:f8:97:0f:81:d3:62:96:a0:76:0e:73:9d: b1:39:77:a0:79:b2:c3:6a:85:ca:b8:4e:78:a0:20: 72:10:6e:12:a9:92:18:49:28:13:8a:e2:8a:31:7f: d3:4b:53:7a:bd:6e:04:9a:77:38:f7:76:0a:84:a9: 75:37:7b:84:14:8b:8f:91:d1:a2:c5:b4:34:88:ec: 19:5a:f3:6a:3b:03:6f:a3:fb:af:6e:13:5a:47:ad: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:72:4C:E9:3D:6D:E6:53:99:99:DC:F3:E6:9F:BB:0C:4D:ED:4C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: 72.18.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c6:0b:e8:18:08:7e:70:8f:4f:fe:20:26:35:75:8c:40:fe: d6:5d:af:54:dc:43:f6:a4:4b:e3:f3:68:c9:d3:35:cb:1f:0f: 57:a4:c9:33:8a:f0:6f:28:77:79:89:d5:20:86:2b:95:05:7c: 4a:bf:62:88:cc:b9:f1:df:a5:43:4b:e9:8f:0c:bc:09:9b:36: 57:fe:d4:40:ad:f9:ce:50:dc:61:fd:7d:bf:47:c9:a4:47:c1: 2c:ed:eb:4c:3a:f2:26:d0:07:13:ce:16:66:bc:4f:38:d8:47: 7c:5d:3b:5d:72:a0:61:98:14:4b:34:60:b9:ed:64:1d:61:1b: 82:68:77:9d:03:04:c9:01:68:d8:ba:ba:45:0c:3e:95:cc:61: ca:04:8e:59:13:e1:d6:fb:f3:dd:55:a1:5e:63:ca:5b:2f:4d: 6d:66:b1:31:af:1c:1b:f3:85:4f:e9:64:95:66:98:35:e2:d8: a7:45:28:fa:99:a2:bf:55:9a:18:90:be:62:7e:30:5a:a8:d6: e1:a5:90:99:30:d0:bb:3d:5f:7b:05:25:f1:ea:e0:f1:12:5f: 50:e1:26:53:87:03:80:dd:44:48:9b:0c:5f:af:d0:4f:66:f6: 71:0e:29:06:ea:ab:94:62:18:73:40:a3:c9:16:e7:a4:c1:06: 60:a3:a4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnrxFEWoiLm6LWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NzJkZWZhMzMtZGZiOC00N2YyLTgyYjAtMDY0OWZkYWE0MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHzavI9W7vPQbaXjGp3OLMoI8qynEgAfnF69 VBN+lMjEVIXh2HirIx4sE5CWFoI846GVTd3DBRptfUnqfSK0d3aTjXvkgiWFJ9mL mn+TWPWpEpcNG9ZX7miVyPlGpAE+CrYIfpjIuj/fspH5b0g/spm0QhuL81W80x1+ JDEB3YlorLzU1jWIhu6LEU+CwCQIwsYCK/y4IZvsdpWrJB+SGe6kZgiUxv74lw+B 02KWoHYOc52xOXegebLDaoXKuE54oCByEG4SqZIYSSgTiuKKMX/TS1N6vW4Emnc4 93YKhKl1N3uEFIuPkdGixbQ0iOwZWvNqOwNvo/uvbhNaR61/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtyTOk9beZTmZnc8+afuwxN7UxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvMzkxOGQ5NmQtZWM4Mi0z ZDUxLTkxYTctM2EyNTI5ZGI0MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7GC+gYCH5wj0/+ICY1dYxA/tZdr1TcQ/akS+PzaMnTNcsfD1ekyTOK 8G8od3mJ1SCGK5UFfEq/YojMufHfpUNL6Y8MvAmbNlf+1ECt+c5Q3GH9fb9HyaRH wSzt60w68ibQBxPOFma8TzjYR3xdO11yoGGYFEs0YLntZB1hG4Jod50DBMkBaNi6 ukUMPpXMYcoEjlkT4db7891VoV5jylsvTW1msTGvHBvzhU/pZJVmmDXi2KdFKPqZ or9VmhiQvmJ+MFqo1uGlkJkw0Ls9X3sFJfHq4PESX1DhJlOHA4DdREibDF+v0E9m 9nEOKQbqq5RiGHNAo8kW56TBBmCjpHs= -----END CERTIFICATE-----Generated at Wed May 7 12:05:29 2025 by rpki-client